last executing test programs: 1m54.941445453s ago: executing program 1 (id=488): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2000000000000, 0x802) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) close(r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f00000001c0)=""/154, 0x9a) close(r4) mmap(&(0x7f0000a2a000/0x2000)=nil, 0x2000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x4000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000280)=""/194) mmap(&(0x7f0000a2b000/0x3000)=nil, 0x3000, 0x80000c, 0x10010, r4, 0x99903000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 1m54.791701583s ago: executing program 1 (id=489): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x17, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bd01177d3d458dd4992861ac0000000000000000000000000000df000000000000000000000000000000efff00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20000000000, 0xffffffffffffffff]}}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 1m54.437183372s ago: executing program 1 (id=492): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x2ba240, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000007205f347362150eea08141d58600003bc053bc275c4d57068ea701ca20315c16d43ffd8947f942f3"]) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000240)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f0000000000)='0\x00', 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000009c0)={r7, 0x0, r7, 0x3, 0x81, 0x9f, 0xfffffff4, 0x3, 0x80, 0x0, 0xaf}) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_SG_TABLESIZE(r8, 0x227f, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) r9 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r9, 0x2284, &(0x7f0000000080)) ioctl$int_in(r9, 0x5452, &(0x7f00000001c0)=0x2) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5309, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000000000000080000806c000000ff07000005000000070000000000000001000040700600000d000000100000004096bd0687ca3bfafc00000000000000080000800400000009000000970a000005000000000000000d0000008800000002000000fb990000000000000000000001000000ff7f0000080000000200000003000000000000000000000007000000020000009c0000000600000000000000"]) 1m54.162426362s ago: executing program 1 (id=494): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) dup(r0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x206, 0x0, 0x570079be}]}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) read$FUSE(r1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000080)={r7}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, r6, 0x0) r8 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 1m52.835522971s ago: executing program 1 (id=502): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2ca80, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x4b, 0xd6e}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x3d, 0x1101}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000280), 0x5fe83c25, 0x4182c3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r5, 0x6f000) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000580)={{r3}, r4, 0x2, @inherit={0x50, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000010000000000000001000000000000ffffffffffffff7f0001000000000000000000000000400000090000000000000006000000000000000000000600000000ff0f000000000000"]}, @name="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"}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x28200, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x4) read(r6, &(0x7f0000000100)=""/159, 0xfffffe5a) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x17db, 0xa001) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x200040, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$UHID_INPUT(r10, &(0x7f0000002a80)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) ioctl$VIDIOC_QUERYCTRL(r9, 0xc0445624, &(0x7f0000000200)={0xd0, 0x100, "86572ee07a254495ade443693ff1d966d11301729bc0046ad14a63ae0f81ccda", 0x5, 0x9, 0x0, 0x10, 0x29b}) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000001580)) ioctl$USBDEVFS_CLEAR_HALT(r8, 0x80045515, &(0x7f00000002c0)={0x1, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001600)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 1m52.528938599s ago: executing program 1 (id=506): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$int_out(r0, 0x3, &(0x7f0000000000)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc}) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0xc722, 0x200000) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000100)={{0x0, 0xd74, 0xffffffff, 0x4, 0x62, 0x3, 0x1, 0x4, 0x8, 0x7, 0x8001, 0x1, 0x7f38, 0x2ce841cf, 0x3}}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000001100)={[0x872a, 0x401, 0x5, 0x3, 0x3, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x80d, 0x9, 0x7, 0x0, 0x2, 0xfffffffffffffffd, 0x7fff, 0x5, 0x8000000000000000], 0xeeee8000, 0x8040}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000011c0)) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001200)={0x0, 0x4, 0x5, 0xfff00000}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001240)={{0x1, 0x1, 0x18, r1, {0x900}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r4 = openat$cgroup_ro(r3, &(0x7f0000001a80)='cgroup.events\x00', 0x0, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001ac0), 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000001b00)='cgroup.freeze\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000001b40)=@arm64) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000001b80)={0xdd3, 0x9, 0x2, 0x2, 0x7, 0x7, "09e6d56b02224068db5bb7066b4a8354", 0xb, 0xd, 0x81, 0x7, 0xff, 0x3}) r7 = syz_open_dev$vcsu(&(0x7f0000001bc0), 0xb, 0x81) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000001c00), 0x55ba, 0x2000) ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f0000001cc0)={0x11, 0x5a, &(0x7f0000001c40)="2f9176af98398ce33ff1c14a0f1f83f7cb86ce5be51684fdf7128a552a8e6ce445b45c823d77b24b7c10f11610fcd503c4a6eb6d75734e5a4574a1095a25d653e8f4a6961f01d8595aea2fa0e6603a120c444717a008692a5913"}) preadv(r7, &(0x7f0000003180)=[{&(0x7f0000001d00)=""/212, 0xd4}, {&(0x7f0000001e00)=""/118, 0x76}, {&(0x7f0000001e80)=""/29, 0x1d}, {&(0x7f0000001ec0)=""/16, 0x10}, {&(0x7f0000001f00)=""/83, 0x53}, {&(0x7f0000001f80)=""/231, 0xe7}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/248, 0xf8}], 0x8, 0x4, 0x5) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000003200)={0x1, 0x8, 0x4, 0x0, 0xa}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000003240)={[0xfe, 0x9, 0x8001, 0x4, 0x9, 0x7, 0x1, 0x2, 0x10000, 0x5, 0xa1b1, 0x2, 0x1, 0x1bfb, 0x401, 0x7], 0x4000, 0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) write$char_usb(r4, &(0x7f0000003300)="a1430cbdd8dba9ebb0f53ebb30f564b318956c628961d1fcc67605cf2ba8ca5b1307a294309ff96207c536ba114c53bb8fa8c032a992e33705b7730b9d1f02ec268a428f6cbe0358eb401accbf97831eb6860e11458b16098d92ecb60f314da0d9a7db0dfe84c01f2de91d8fa089d6a7706e365775eb520419c03ee17a6e5ba5e27be8e1de6fd621c7fe2ac3567b3ee6e1b26dc2b1d5e7a868764118bfb9217aecac3c166cf94be548774bc1fc8bf40d96a1788cb36990439db6d29bde033daac6", 0xc1) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000003400)={0x30, 0x5, 0x0, {0x0, 0x5, 0x8, 0x8e}}, 0x30) 1m37.368128321s ago: executing program 32 (id=506): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$int_out(r0, 0x3, &(0x7f0000000000)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc}) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0xc722, 0x200000) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000100)={{0x0, 0xd74, 0xffffffff, 0x4, 0x62, 0x3, 0x1, 0x4, 0x8, 0x7, 0x8001, 0x1, 0x7f38, 0x2ce841cf, 0x3}}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000001100)={[0x872a, 0x401, 0x5, 0x3, 0x3, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x80d, 0x9, 0x7, 0x0, 0x2, 0xfffffffffffffffd, 0x7fff, 0x5, 0x8000000000000000], 0xeeee8000, 0x8040}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000011c0)) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001200)={0x0, 0x4, 0x5, 0xfff00000}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001240)={{0x1, 0x1, 0x18, r1, {0x900}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r4 = openat$cgroup_ro(r3, &(0x7f0000001a80)='cgroup.events\x00', 0x0, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001ac0), 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000001b00)='cgroup.freeze\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000001b40)=@arm64) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000001b80)={0xdd3, 0x9, 0x2, 0x2, 0x7, 0x7, "09e6d56b02224068db5bb7066b4a8354", 0xb, 0xd, 0x81, 0x7, 0xff, 0x3}) r7 = syz_open_dev$vcsu(&(0x7f0000001bc0), 0xb, 0x81) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000001c00), 0x55ba, 0x2000) ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f0000001cc0)={0x11, 0x5a, &(0x7f0000001c40)="2f9176af98398ce33ff1c14a0f1f83f7cb86ce5be51684fdf7128a552a8e6ce445b45c823d77b24b7c10f11610fcd503c4a6eb6d75734e5a4574a1095a25d653e8f4a6961f01d8595aea2fa0e6603a120c444717a008692a5913"}) preadv(r7, &(0x7f0000003180)=[{&(0x7f0000001d00)=""/212, 0xd4}, {&(0x7f0000001e00)=""/118, 0x76}, {&(0x7f0000001e80)=""/29, 0x1d}, {&(0x7f0000001ec0)=""/16, 0x10}, {&(0x7f0000001f00)=""/83, 0x53}, {&(0x7f0000001f80)=""/231, 0xe7}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/248, 0xf8}], 0x8, 0x4, 0x5) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000003200)={0x1, 0x8, 0x4, 0x0, 0xa}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000003240)={[0xfe, 0x9, 0x8001, 0x4, 0x9, 0x7, 0x1, 0x2, 0x10000, 0x5, 0xa1b1, 0x2, 0x1, 0x1bfb, 0x401, 0x7], 0x4000, 0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) write$char_usb(r4, &(0x7f0000003300)="a1430cbdd8dba9ebb0f53ebb30f564b318956c628961d1fcc67605cf2ba8ca5b1307a294309ff96207c536ba114c53bb8fa8c032a992e33705b7730b9d1f02ec268a428f6cbe0358eb401accbf97831eb6860e11458b16098d92ecb60f314da0d9a7db0dfe84c01f2de91d8fa089d6a7706e365775eb520419c03ee17a6e5ba5e27be8e1de6fd621c7fe2ac3567b3ee6e1b26dc2b1d5e7a868764118bfb9217aecac3c166cf94be548774bc1fc8bf40d96a1788cb36990439db6d29bde033daac6", 0xc1) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000003400)={0x30, 0x5, 0x0, {0x0, 0x5, 0x8, 0x8e}}, 0x30) 28.583989519s ago: executing program 2 (id=1016): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close(0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 28.077548404s ago: executing program 2 (id=1018): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$vim2m(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000005440)={0x1, 0x2, 0x0, "c165800400a27d4c2328a656f51640957f84b6a11d204715fac6704bbdc92e00"}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 27.350901449s ago: executing program 4 (id=1021): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000480)={0x10000, 0x0, 0x140, &(0x7f00000007c0)=[0x5, 0x7fff, 0xed, 0x0, 0x3, 0x0, 0x4, 0xda9, 0x4, 0x2, 0x277f5f6b, 0x800, 0x3, 0x6, 0x4697, 0x401, 0x3, 0xc00000000000000, 0x101, 0x7, 0x9, 0x5, 0x100, 0x0, 0x9e, 0x7ff, 0x6, 0x2, 0xaa31, 0x3, 0x1, 0x5, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x9a0a, 0xef3, 0x795f, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x1, 0x8000000000000001, 0x8, 0xfffffffffffffffa, 0x7fffffffffffffff, 0x1, 0x0, 0x7e, 0x7fffffff, 0x100000000, 0x8, 0x9, 0x4, 0x0, 0x1, 0xfffffffffffffff7, 0x7, 0x2, 0x3ff, 0xf7f2, 0x11cb, 0x7, 0x80000001, 0x8, 0x2, 0x0, 0x2, 0x8, 0x5, 0x7, 0x40, 0x10000, 0x1ff, 0x8000000000000000, 0x3, 0x7, 0x8, 0x2, 0x10000, 0x5, 0xb, 0x100, 0x4, 0xc, 0x7, 0x7fffffffffffffff, 0x7, 0x5, 0x200, 0x2, 0x4, 0x70cf, 0xfffffffffffffffe, 0x4, 0xe581, 0xc9, 0x2, 0x0, 0x3, 0x3d20, 0x7f3, 0x7f, 0x7, 0x9990, 0x9, 0x5, 0x2, 0x5, 0x6, 0x6, 0x5ca, 0x6bd, 0x2, 0x3, 0x0, 0x4b, 0x9, 0xa, 0x3, 0x5, 0x200000, 0x9, 0x100000001]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x8001, 0x7, 0x0, 0x1c, 0x5, 0x2, 0xd, 0x2, 0xf9, 0x2, 0x80, 0x9, 0x1}, {0x6, 0xc0, 0x8, 0xc4, 0x8, 0x7, 0x8, 0x9, 0x7, 0xff, 0x0, 0x81}, {0xe2a5, 0xd, 0x1, 0x9, 0x2, 0x6, 0x9, 0x8, 0x7f, 0x6, 0x56, 0x7, 0x100}], 0x4}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x275a, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000240)={[{0x7, 0x1, 0x14, 0x9, 0x8, 0x5, 0x5, 0x1, 0xd, 0xb, 0x0, 0x5, 0x3db}, {0x4, 0x587, 0x0, 0x62, 0x7, 0x5, 0xb, 0x77, 0x9a, 0x87, 0x0, 0x7, 0x40}, {0x3, 0x0, 0x5, 0x8, 0x5, 0xe, 0xbb, 0xfa, 0xe, 0x7, 0x8, 0x73, 0xadc}], 0x16f80}) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x1000, 0x704, 0x3, 0x4, 0x0, [{0x1, 0x4, 0xa}, {0x6, 0x1, 0x9, '\x00', 0xb}, {0x7, 0x3, 0x1, '\x00', 0x3}, {0x6, 0xad}, {0xf8, 0x10, 0x32, '\x00', 0x61}, {0x8, 0x3, 0x0, '\x00', 0x9}, {0xa5, 0x9, 0xac, '\x00', 0x80}, {0x0, 0x7, 0x5, '\x00', 0x8}, {0xbc, 0x1, 0x70, '\x00', 0x3}, {0x2, 0x81, 0x2, '\x00', 0x1}, {0x7, 0xb, 0x9, '\x00', 0x5}, {0x81, 0x9, 0xe0, '\x00', 0x9}, {0x80, 0x9, 0x2, '\x00', 0x2}, {0x81, 0xfa, 0x18, '\x00', 0x4}, {0x8, 0x9, 0xd, '\x00', 0xf8}, {0x2, 0x27, 0xfa, '\x00', 0xe}, {0x1, 0x9, 0xa0, '\x00', 0x10}, {0x3, 0xff, 0x5}, {0x2, 0x8, 0x97, '\x00', 0x2}, {0xf, 0x2, 0xd4, '\x00', 0xb}, {0xf, 0x84, 0x2, '\x00', 0x8}, {0xd0, 0x4, 0x0, '\x00', 0x4}, {0x60, 0x9, 0x9, '\x00', 0x2}, {0x0, 0x3, 0xbb, '\x00', 0x47}]}}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000085dd000000000000009795b3218825cc5b9455d97bff7ab614cd02dad6cc9498527df3bac3ed3a72fd94ceaaf4713f97ad585b929701c20351a02a97ad95a9eb687cc027d72bc6e075b7a3d04ad0cd8660af06b320670f4c494738f6b7ba70a12a8c277601df71feff116cd33ff7aabf420f"]) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r10}}, 0x48) syz_open_dev$sndctrl(&(0x7f0000000200), 0xf20, 0x2001) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000380)={{@any, 0x8}, 0x0, 0x1, 0x97}) close(0x3) write$RDMA_USER_CM_CMD_GET_EVENT(r9, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 26.893967438s ago: executing program 4 (id=1023): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x0, 0x8, &(0x7f00000000c0)={0x22, "d69a00000000001c028f7e453b653a1478005a31589cff42e82e58b2b3b9de670d"}}) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x52424752, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x7}}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x10000001, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x2, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x6}}, {0x0, 0x1c}}}, 0xa0) pwritev(r3, &(0x7f0000001880)=[{&(0x7f0000001800)="69c8dc1aa33c1cf69c7a5941508f4b3be95ffb20ea062ef0c6989ae4f94a846f655cdd834ac52f6c151dad6251b6bdfc5d46e04600cada480f76f0ca36dcd8a0839ae19c05267ec38a9ef569ff255e36c070740f6355179e56ed743ae9298ef83cfd4c7332d5e12d7bae0f5b7f22ac8a8fcae61f91d9b18defa334", 0x7b}], 0x1, 0x1, 0x4) read$FUSE(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x6) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000580)="28bba785eca59ad3f9d605b3d3ee5b82306ef9b8b839d6ea243d781cca204d4f1c1385d7ee1f32c13d3ebe2968809f175a2953d95e482bf786a5cc4f947ea37d7a1fc8a9020ab8d6355d04", 0x4b}, {&(0x7f0000001d80)="b64b06f42e20b28007fccccd8136f2266c706cfaa708cccedc3a8692b53a5ae40338cec27740b47a18405b06df0e794af8422bcc40d9641db8b4aca076e2cc5aa4191adf9616e55c09bbe62e4da930e98859568591c08b8e012160cef4f45ec7589b8a20364c2497f75ba3e2893d36aafefebff1434a6f50f6b7379a803da5c10cac1134cfdef1587ce3c880fb021084b5e5934b4b3cff84d9ec0318f25fb6c414ad5e78059de5a7caff5b7d6f8ba54f3143afc88d9a6c8cafd3be4c65eadd7c1fcf3ead656e62f93f1631353c2d7c0c602583ba476b36a88166b0e92d62a44bc4460d684d32ed0b21f7ad2e8f8a8c4c2d791427ac7061", 0xf7}, {&(0x7f0000001cc0)="5e0beffe921242923fcc30fc578e8928a852d1eea56ff8b9d0983fd41c65222b8be164af84d83fb1ac3db83fb72c09c30aa7e1484bfdb02715b528d7109302c1773e71aab68159b50d6cb5f3e6394d4a7745f45cb181e443908c212bb28aecda638558d8ad56d7edabdf75ab7c7cfd3e509c212ec0616b7d49b80acbdf0e5c3a8dd2c1b0bed2eaafab9cf2e27c85fbe8f3a1a62bcd47dbd40aa5a4db4c8ea8f80126f9edc057906d33672700"/181, 0xb5}], 0x3, 0xce, 0x15) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000000240)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000080)={0x9, 0x0, 0x3000, 0x800a, 0xf, "5ffffc928154552a"}) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000006c0)=0x16) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) preadv(r6, &(0x7f0000000600)=[{&(0x7f0000001a00)=""/203, 0xcb}, {&(0x7f00000003c0)=""/15, 0xf}, {&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000500)=""/64, 0x40}, {&(0x7f0000000540)=""/16, 0x10}, {&(0x7f0000001980)=""/104, 0x68}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/222, 0xde}], 0x9, 0x80000001, 0x8) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) dup(r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000001900)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000001940)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) 26.365196731s ago: executing program 4 (id=1025): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x34424752}}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000000c0)={0xc, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x101200, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0505350, &(0x7f0000000340)={{0x0, 0xfc}, 'port1\x00', 0x0, 0x100201, 0x2, 0xfffffff8, 0x3, 0x0, 0x2, 0x0, 0x3, 0xf3}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f0000000240)={0x30}) openat(r2, 0x0, 0x80402, 0x41) 26.176762546s ago: executing program 2 (id=1027): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x4a1, 0x40) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r3}) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000380)={0x8, r3}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0xb, r0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x1, 0x0, 0x8, 0xc}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x634c00, 0x0) 26.025345225s ago: executing program 2 (id=1028): r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x10800000100401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x1012, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000240)={0x2, "c34fb2a58f0226655fa2fcaa7aa33194b6e7e6923cbbb1789a915908956ffc7c", 0x3, 0x1}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x2710, 0x4, 0x80a0000, 0x1000, &(0x7f0000cf1000/0x1000)=nil, 0x2800000000000000}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000f20300"/24]) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000200)=0xa0000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4048aec9, &(0x7f0000000740)={0x2, 0x0, @pic={0x4, 0x0, 0x0, 0x4}}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000280)={@local}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r8, 0x4020aed2, &(0x7f00000001c0)={0xeeee0000, 0x8000, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r6, 0x7a9, &(0x7f0000000180)={{@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000007, 0xfffffffffffffffb}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r9, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 25.903961469s ago: executing program 4 (id=1030): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) openat(r1, 0x0, 0x80402, 0x41) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/51, 0x33}, {&(0x7f00000011c0)=""/143, 0x8f}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000001280)=""/45, 0x2d}, {&(0x7f00000012c0)=""/48, 0x30}], 0x6, 0xfff, 0x3) 25.47862936s ago: executing program 2 (id=1033): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) openat(r1, 0x0, 0x80402, 0x41) 25.36651112s ago: executing program 4 (id=1034): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0xfb7f, 0x0, 0x2, 0x2000, &(0x7f000000b000/0x2000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000083, 0x0, 0xcc4}]}) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r10, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff000800000000000000000000000000001400", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}}) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f00000001c0)={0x40001, 0x0, [0x3ad1, 0x9, 0x8, 0x180000, 0x76, 0x3, 0x80000000, 0x8]}) mmap(&(0x7f00005f9000/0x2000)=nil, 0x2000, 0x100000d, 0x12, r2, 0x676bd000) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r11, 0xc0045103, &(0x7f0000000040)) read(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000080)=""/119) 25.057434804s ago: executing program 4 (id=1035): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000100)={{}, 0x1}) openat(r1, 0x0, 0x80402, 0x41) 25.048650208s ago: executing program 2 (id=1036): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000100)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001480)={0xfc, {"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", 0xfffffdc3}}, 0x1039) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="ff"]) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x10004, 0x147ef3691bfaa057, 0x2, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r1, 0xc048aeca, &(0x7f00000001c0)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x4, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x3081, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r11, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x8, 0x6, '\x00', 0x1f8630ad}) 17.377286495s ago: executing program 0 (id=1068): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000340)={0xfffffd12}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) ioctl$BLKOPENZONE(r2, 0x40101286, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) write$char_usb(r3, &(0x7f00000001c0)="1a97a6c5c600a7748d53ce88e5f025e46cb336eca44f1e64e53a969a9592da0295c07e21c2c5df80e29a5235e125b8fe600c764903f1fed60e65e86e1dbef78626b06fb205daa2a67a3b92259a270070", 0x50) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) r5 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) (async) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000040)) read$FUSE(r4, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) r7 = openat$vim2m(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000005440)={0x1, 0x2, 0x0, "c165800400a27d4c2328a656f51640957f84b6a11d204715fac6704bbdc92e00"}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x40086602, &(0x7f0000000080)={0x17e}) (async) r9 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x0) (async) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000040)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r10, 0x40505412, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x700}) (async) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f00000000c0)={0xaa9f, 0x279a}) 17.270958934s ago: executing program 0 (id=1070): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x6) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x4) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x868]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x151100, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 16.717327493s ago: executing program 0 (id=1071): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a383, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) mmap(&(0x7f0000a04000/0x3000)=nil, 0x3000, 0x5000002, 0x2012, r0, 0xe45f2000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x48002, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r4, &(0x7f00000001c0)=[{0xff, 0x0, 0x0, 0x0, @time={0x400, 0x3}}, {0x0, 0x6, 0x0, 0xfd, @time, {}, {}, @result}], 0x38) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYRESDEC=r5]) r6 = openat$sndtimer(0xffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000300)={{0x80, 0xd}, 'port0\x00', 0xa8, 0x10000, 0x20, 0x5, 0x0, 0x8, 0x1, 0x0, 0x7, 0x6}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000040), 0x2, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000280)={0x201, 0x1, &(0x7f0000000440)=[r9], &(0x7f0000000240)=[0x2], &(0x7f0000000040)=[r10, r10], &(0x7f0000000580)}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x15243525538eff65) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x0, 0x0, {{0x5, 0x1000002, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x4, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00005ad000/0x4000)=nil, 0x4000, 0x4, 0x20010, 0xffffffffffffffff, 0x7db4a000) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0) r12 = dup(r11) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f00000002c0)=@x86={0x12, 0xb, 0x4, 0x0, 0xd, 0x7, 0xff, 0x5, 0x7, 0x0, 0x4, 0x2, 0x0, 0x9, 0x6, 0x1, 0xff, 0x3, 0x7f, '\x00', 0xde, 0x9c}) mmap(&(0x7f00009c8000/0x4000)=nil, 0x4000, 0x1000000, 0x110, r3, 0x0) ioctl$KVM_SET_CPUID2(r12, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000000000000100004081050000000000000000040006000000fbfffffff9ffffff00000000000000000000000001000002040000000500000009000000400000000d000000060000000000000000000000000000000000070000000100000005000000020000009307000000000000000000000000000000000000070000000700000004000000790d000009000000000000000300000000000000000000000000000000000080ffffff7f04000000ffff0000ff0100000800000006000000000000000000000000000000080000800700000000000000010000000c0000000300000001000000000000000000000000000000000035b8d0a919e31db850c045e6a7019832aba3635e131c5f607b622140c0a5b172e972123419b0de3640d8b32a0cea084faad988a9acb54ffc2bf172098d9789fc0098bf56a53247c2173fbf309cb0b5f9"]) 16.70927715s ago: executing program 3 (id=1072): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) read(r0, &(0x7f00000001c0)=""/157, 0x9d) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x8000000) 16.65008369s ago: executing program 3 (id=1073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r3, &(0x7f0000000100)=""/159, 0xfffffe5a) 16.497388747s ago: executing program 0 (id=1074): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0x4000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1000000000000112, 0x2000, 0x0, 0x3) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x6, 0xb, 0x3, 0x0, 0x9}) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 16.157942385s ago: executing program 3 (id=1075): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x2, 0x8080000, 0x2000, &(0x7f0000789000/0x2000)=nil}) 16.097905664s ago: executing program 3 (id=1076): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000003c0)=0xfff) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) (async) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x5010c2) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x5010c2) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000200)={0x0, "0b85208b999b09b08101928813f10b8d217825fcf5b9b2af6d43dbff8b55d3b1"}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x82, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x80000001, 0x9, 0x6, 0x1, 0x101, 0x8, 0xe, 0xc000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xfffffffffffffe29) read$FUSE(r1, 0x0, 0x0) (async) read$FUSE(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f00000004c0)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x92f, 0x100, 0x1b2, 0x10000003, {0xfffffffc, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x4, 0x8, 0xc, 0xff, "b4bc323ef77d1f000071849820000000deff000000e6ffffff00"}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0xc8800, 0x0) (async) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0xc8800, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000080)=0xf4240) ioctl$IMDELTIMER(r6, 0x80044941, &(0x7f0000000040)=0x3) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x801, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) close(r7) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x50040) (async) syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x50040) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000240)={0x400000007000, 0x10}) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000200)={0x5, 0x7}) ioctl$UI_DEV_CREATE(r5, 0x5501) 15.917523424s ago: executing program 0 (id=1077): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[r6, r7, r2], 0x3, 0x0, 0x0, 0xffffffffffffffff}) read(r0, &(0x7f00000001c0)=""/157, 0x9d) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = dup(r11) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x29d, 0x0, 0x4}]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r8, 0xc01464a6, &(0x7f0000000040)={r6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r12, 0xc02064a5, &(0x7f0000000400)={r13, 0x3, &(0x7f00000000c0)=[0xc4, 0x0, 0x4], &(0x7f0000000180)=[0x9, 0x8600, 0x4, 0x0, 0xff01], &(0x7f0000000300)=[0xb, 0x7, 0x1]}) 15.768854845s ago: executing program 0 (id=1078): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x0, 0xc, 0xfffd, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/sync_on_suspend', 0x402840, 0x40) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r3, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r3, 0x40101286, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000300)={0xa0, 0x0, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x9b3, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x5, 0x101, 0x7, 0xe, 0xb000, 0xd, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r4, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = dup(r5) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x2002}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r10, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) write$RDMA_USER_CM_CMD_QUERY(r9, &(0x7f00000009c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) 15.426233068s ago: executing program 3 (id=1079): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x1000000000000000) openat(r1, 0x0, 0x80402, 0x41) 15.155330446s ago: executing program 3 (id=1080): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) dup(0xffffffffffffffff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) (async) mmap(&(0x7f0000fc1000/0x2000)=nil, 0x2000, 0x1000002, 0x100010, r0, 0xc6981000) (async) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x92) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xf8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r4, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7], [0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000]}, 0x45c) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_NMI(r7, 0xae9a) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000600)="9d8d64c117", 0x5) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x1, 0x40000000200]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) (async) ioctl$UI_DEV_CREATE(r4, 0x5501) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) (async) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) (async) ioctl$vim2m_VIDIOC_STREAMON(r8, 0x40045612, &(0x7f0000000040)=0x1) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000240)={0x2, 0x1, 0x0, "2cdce336a15a4cdbe2b19941dfe83c69bfa10cd0f15d7b63534fe44516f68e20"}) 9.128342989s ago: executing program 33 (id=1035): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000100)={{}, 0x1}) openat(r1, 0x0, 0x80402, 0x41) 9.094050717s ago: executing program 34 (id=1036): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000100)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001480)={0xfc, {"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", 0xfffffdc3}}, 0x1039) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="ff"]) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x10004, 0x147ef3691bfaa057, 0x2, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r1, 0xc048aeca, &(0x7f00000001c0)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x4, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x3081, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r11, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x8, 0x6, '\x00', 0x1f8630ad}) 53.803083ms ago: executing program 35 (id=1078): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x0, 0xc, 0xfffd, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/sync_on_suspend', 0x402840, 0x40) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r3, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r3, 0x40101286, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000300)={0xa0, 0x0, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x9b3, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x5, 0x101, 0x7, 0xe, 0xb000, 0xd, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r4, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = dup(r5) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x2002}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r10, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) write$RDMA_USER_CM_CMD_QUERY(r9, &(0x7f00000009c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) 0s ago: executing program 36 (id=1080): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) dup(0xffffffffffffffff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) (async) mmap(&(0x7f0000fc1000/0x2000)=nil, 0x2000, 0x1000002, 0x100010, r0, 0xc6981000) (async) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x92) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xf8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r4, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7], [0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000]}, 0x45c) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_NMI(r7, 0xae9a) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000600)="9d8d64c117", 0x5) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x1, 0x40000000200]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) (async) ioctl$UI_DEV_CREATE(r4, 0x5501) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) (async) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) (async) ioctl$vim2m_VIDIOC_STREAMON(r8, 0x40045612, &(0x7f0000000040)=0x1) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000240)={0x2, 0x1, 0x0, "2cdce336a15a4cdbe2b19941dfe83c69bfa10cd0f15d7b63534fe44516f68e20"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 144.177170][ T5849] cgroup: Unknown subsys name 'net' [ 144.325765][ T5849] cgroup: Unknown subsys name 'cpuset' [ 144.334551][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 145.758374][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 149.187377][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.198299][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.206260][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.223573][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.231471][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.291549][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.299899][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.308119][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.316585][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.332323][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.380416][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.388663][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.403334][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.411473][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.430988][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.439111][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.489326][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.498125][ T5869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.513557][ T5869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.521392][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.875180][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 149.912685][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 149.994358][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 150.101616][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.109832][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.117986][ T5858] bridge_slave_0: entered allmulticast mode [ 150.125583][ T5858] bridge_slave_0: entered promiscuous mode [ 150.193521][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.200905][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.208893][ T5858] bridge_slave_1: entered allmulticast mode [ 150.216398][ T5858] bridge_slave_1: entered promiscuous mode [ 150.235890][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.243385][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.250691][ T5863] bridge_slave_0: entered allmulticast mode [ 150.258553][ T5863] bridge_slave_0: entered promiscuous mode [ 150.311916][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.321312][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.329483][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.337129][ T5863] bridge_slave_1: entered allmulticast mode [ 150.345104][ T5863] bridge_slave_1: entered promiscuous mode [ 150.364764][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.415319][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.423353][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.430671][ T5865] bridge_slave_0: entered allmulticast mode [ 150.438556][ T5865] bridge_slave_0: entered promiscuous mode [ 150.450469][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.457715][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.465777][ T5865] bridge_slave_1: entered allmulticast mode [ 150.473433][ T5865] bridge_slave_1: entered promiscuous mode [ 150.493844][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.503420][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 150.530189][ T5858] team0: Port device team_slave_0 added [ 150.538949][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.567830][ T5858] team0: Port device team_slave_1 added [ 150.597544][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.642075][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.665588][ T5863] team0: Port device team_slave_0 added [ 150.673415][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.680373][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.706618][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.743057][ T5863] team0: Port device team_slave_1 added [ 150.749437][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.757029][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.784021][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.843498][ T5865] team0: Port device team_slave_0 added [ 150.862646][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.869647][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.895986][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.921495][ T5865] team0: Port device team_slave_1 added [ 150.939943][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.947146][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.973277][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.029177][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.036729][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.044475][ T5867] bridge_slave_0: entered allmulticast mode [ 151.051495][ T5867] bridge_slave_0: entered promiscuous mode [ 151.076973][ T5858] hsr_slave_0: entered promiscuous mode [ 151.084980][ T5858] hsr_slave_1: entered promiscuous mode [ 151.093295][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.100674][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.108601][ T5867] bridge_slave_1: entered allmulticast mode [ 151.115917][ T5867] bridge_slave_1: entered promiscuous mode [ 151.137113][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.144186][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.170434][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.225098][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.232078][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.258435][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.269686][ T5861] Bluetooth: hci0: command tx timeout [ 151.280724][ T5863] hsr_slave_0: entered promiscuous mode [ 151.288110][ T5863] hsr_slave_1: entered promiscuous mode [ 151.295144][ T5863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.303162][ T5863] Cannot create hsr debugfs directory [ 151.317224][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.372714][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.400652][ T5865] hsr_slave_0: entered promiscuous mode [ 151.407315][ T5865] hsr_slave_1: entered promiscuous mode [ 151.414096][ T5865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.422023][ T5865] Cannot create hsr debugfs directory [ 151.434397][ T5861] Bluetooth: hci1: command tx timeout [ 151.481492][ T5867] team0: Port device team_slave_0 added [ 151.489655][ T5867] team0: Port device team_slave_1 added [ 151.512807][ T5861] Bluetooth: hci2: command tx timeout [ 151.572416][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.580033][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.606763][ T5861] Bluetooth: hci3: command tx timeout [ 151.612785][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.642317][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.649366][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.676004][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.867965][ T5867] hsr_slave_0: entered promiscuous mode [ 151.874956][ T5867] hsr_slave_1: entered promiscuous mode [ 151.881030][ T5867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.888789][ T5867] Cannot create hsr debugfs directory [ 152.001262][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 152.014165][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 152.032927][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 152.055568][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 152.145906][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 152.176003][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.214864][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.231238][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 152.301505][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.320878][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.339251][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.351409][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.480418][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 152.499286][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.517869][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 152.528711][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 152.541063][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 152.596184][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.606400][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.647072][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.654681][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.672522][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.692519][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.699704][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.714337][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.721525][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.771580][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.781185][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.788496][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.840419][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.876277][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.883458][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.904770][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.911946][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.018574][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.087648][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.117672][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.125073][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.161565][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.168762][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.289814][ T5867] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 153.312515][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.342897][ T5861] Bluetooth: hci0: command tx timeout [ 153.397516][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.469589][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.503714][ T5861] Bluetooth: hci1: command tx timeout [ 153.557172][ T5858] veth0_vlan: entered promiscuous mode [ 153.582776][ T5861] Bluetooth: hci2: command tx timeout [ 153.600593][ T5858] veth1_vlan: entered promiscuous mode [ 153.640443][ T5865] veth0_vlan: entered promiscuous mode [ 153.657791][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.664729][ T5861] Bluetooth: hci3: command tx timeout [ 153.700563][ T5865] veth1_vlan: entered promiscuous mode [ 153.726861][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.758178][ T5858] veth0_macvtap: entered promiscuous mode [ 153.782422][ T5858] veth1_macvtap: entered promiscuous mode [ 153.817337][ T5863] veth0_vlan: entered promiscuous mode [ 153.838798][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.850703][ T5865] veth0_macvtap: entered promiscuous mode [ 153.867814][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.878498][ T5865] veth1_macvtap: entered promiscuous mode [ 153.888833][ T5863] veth1_vlan: entered promiscuous mode [ 153.905689][ T5858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.915228][ T5858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.924596][ T5858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.933552][ T5858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.976821][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.995616][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.018889][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.029977][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.039790][ T5865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.049179][ T5865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.061783][ T5867] veth0_vlan: entered promiscuous mode [ 154.107366][ T5863] veth0_macvtap: entered promiscuous mode [ 154.122324][ T5867] veth1_vlan: entered promiscuous mode [ 154.140377][ T5863] veth1_macvtap: entered promiscuous mode [ 154.181213][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.196034][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.261441][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.274103][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.286249][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.306792][ T5867] veth0_macvtap: entered promiscuous mode [ 154.319875][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.332667][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.374512][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.385133][ T5867] veth1_macvtap: entered promiscuous mode [ 154.420508][ T5863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.436099][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 154.436302][ T5863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.462208][ T5863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.471377][ T5863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.493946][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.509336][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.517004][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.563638][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.606136][ T5867] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.626452][ T5867] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.636151][ T5867] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.645503][ T5867] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.768814][ T5946] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 154.823164][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.842921][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.938166][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.957232][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.979686][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.022249][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.147492][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.158900][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.424531][ T5861] Bluetooth: hci0: command tx timeout [ 155.583585][ T5861] Bluetooth: hci1: command tx timeout [ 155.662729][ T5861] Bluetooth: hci2: command tx timeout [ 155.751306][ T5861] Bluetooth: hci3: command tx timeout [ 156.249900][ T24] hid-generic 0004:FFFF:FFFFFFFC.0001: unknown main item tag 0x6 [ 156.263752][ T24] hid-generic 0004:FFFF:FFFFFFFC.0001: unknown main item tag 0x2 [ 156.289574][ T5986] input: syz0 as /devices/virtual/input/input5 [ 156.302300][ T24] hid-generic 0004:FFFF:FFFFFFFC.0001: item fetching failed at offset 13/121 [ 156.327517][ T24] hid-generic 0004:FFFF:FFFFFFFC.0001: probe with driver hid-generic failed with error -22 [ 156.355756][ T5982] nvme_fabrics: missing parameter 'transport=%s' [ 156.464865][ T5982] nvme_fabrics: missing parameter 'nqn=%s' [ 156.811910][ T5998] binder: 5996:5998 ioctl c00c620f 0 returned -14 [ 157.506601][ T5861] Bluetooth: hci0: command tx timeout [ 157.663139][ T5861] Bluetooth: hci1: command tx timeout [ 157.754444][ T5861] Bluetooth: hci2: command tx timeout [ 157.822649][ T5861] Bluetooth: hci3: command tx timeout [ 158.266314][ T6036] binder: 6035:6036 ioctl 127b 200000004740 returned -22 [ 158.440307][ T6045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.080506][ T6076] usb usb8: usbfs: process 6076 (syz.1.36) did not claim interface 0 before use [ 159.341180][ T6083] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 160.274518][ T6110] binder: 6109:6110 ioctl c018620c 200000000500 returned -1 [ 160.725473][ T6119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.304026][ T6132] block device autoloading is deprecated and will be removed. [ 161.325829][ T6132] syz.3.53: attempt to access beyond end of device [ 161.325829][ T6132] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 161.884410][ T6149] input: syz1 as /devices/virtual/input/input7 [ 161.924389][ T6154] loop4: detected capacity change from 0 to 7 [ 161.955332][ T5954] Dev loop4: unable to read RDB block 7 [ 161.966965][ T5954] loop4: unable to read partition table [ 161.977357][ T5954] loop4: partition table beyond EOD, truncated [ 162.340700][ T6165] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.357282][ T6165] i2c i2c-0: Invalid block write size 34 [ 163.078180][ T6181] loop6: detected capacity change from 0 to 524287999 [ 164.041912][ T6223] vivid-001: ================= START STATUS ================= [ 164.063379][ T6223] vivid-001: Radio HW Seek Mode: Bounded [ 164.069286][ T6223] vivid-001: Radio Programmable HW Seek: false [ 164.080136][ T6223] vivid-001: RDS Rx I/O Mode: Block I/O [ 164.089364][ T6223] vivid-001: Generate RBDS Instead of RDS: false [ 164.098050][ T6223] vivid-001: RDS Reception: true [ 164.103875][ T6223] vivid-001: RDS Program Type: 0 inactive [ 164.109832][ T6223] vivid-001: RDS PS Name: inactive [ 164.115601][ T6223] vivid-001: RDS Radio Text: inactive [ 164.121217][ T6223] vivid-001: RDS Traffic Announcement: false inactive [ 164.128679][ T6223] vivid-001: RDS Traffic Program: false inactive [ 164.135501][ T6223] vivid-001: RDS Music: false inactive [ 164.141025][ T6223] vivid-001: ================== END STATUS ================== [ 164.449784][ T6209] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 164.449912][ T6229] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.464988][ T6229] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 164.472153][ T6209] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 164.487276][ T6229] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 164.503295][ T6229] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.515608][ T6209] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.518887][ T6229] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.521893][ T6209] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 164.541772][ T6229] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.554519][ T6229] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.562338][ T6209] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.568749][ T6209] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 164.569900][ T6229] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.586317][ T6229] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.600858][ T6209] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.610228][ T6209] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 167.435066][ T6294] mkiss: ax0: crc mode is auto. [ 167.836068][ T6310] dlm: no locking on control device [ 167.874432][ T6316] usb usb1: usbfs: process 6316 (syz.2.101) did not claim interface 0 before use [ 168.573375][ T6330] vivid-001: ================= START STATUS ================= [ 168.742863][ T6330] vivid-001: Radio HW Seek Mode: Bounded [ 168.748695][ T6330] vivid-001: Radio Programmable HW Seek: false [ 168.829017][ T6330] vivid-001: RDS Rx I/O Mode: Block I/O [ 168.849376][ T6330] vivid-001: Generate RBDS Instead of RDS: false [ 168.870651][ T6330] vivid-001: RDS Reception: true [ 168.884173][ T6330] vivid-001: RDS Program Type: 0 inactive [ 168.899909][ T6330] vivid-001: RDS PS Name: inactive [ 168.912257][ T6330] vivid-001: RDS Radio Text: inactive [ 168.931861][ T6330] vivid-001: RDS Traffic Announcement: false inactive [ 168.965914][ T6330] vivid-001: RDS Traffic Program: false inactive [ 168.992530][ T6330] vivid-001: RDS Music: false inactive [ 169.011095][ T6330] vivid-001: ================== END STATUS ================== [ 169.640913][ T6349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.445776][ T6393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.988443][ T6412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.404465][ T6426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.069488][ T6445] loop6: detected capacity change from 0 to 524287999 [ 173.612007][ T6463] syz.1.143: attempt to access beyond end of device [ 173.612007][ T6463] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 174.248814][ T6483] input: syz0 as /devices/virtual/input/input8 [ 175.565557][ T6523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.143784][ T6539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.544556][ T6555] CUSE: zero length info key specified [ 177.505605][ T6584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.123315][ T6603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.692670][ T6620] kvm_intel: kvm [6617]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 178.829143][ T6623] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 179.169641][ T6630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 179.610831][ T6640] nvme_fabrics: unknown parameter or missing value '0x0000000000000715' in ctrl creation request [ 181.010389][ T6678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.439966][ T6695] mkiss: ax0: crc mode is auto. [ 182.636399][ T6717] binder: 6715:6717 ioctl 40046210 ffffffffffffffff returned -14 [ 183.176891][ T6730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.201351][ T6728] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 183.507030][ T6742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.021925][ T6750] ALSA: mixer_oss: invalid OSS volume '' [ 184.733100][ T6779] usb usb9: usbfs: process 6779 (syz.2.229) did not claim interface 0 before use [ 185.239014][ T6790] ALSA: mixer_oss: invalid OSS volume '' [ 185.281784][ T6793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.582835][ T6798] [U] ^B [ 185.597951][ T6802] loop6: detected capacity change from 0 to 63 [ 185.664037][ T6802] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.672121][ T6802] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.732679][ T6802] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.764871][ T6802] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.797282][ T6802] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.868452][ T6802] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.903074][ T6802] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.911176][ T6802] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.954712][ T6802] ldm_validate_partition_table(): Disk read failed. [ 185.992702][ T6802] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.000993][ T6802] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.009605][ T6802] Dev loop6: unable to read RDB block 0 [ 186.019213][ T6802] loop6: unable to read partition table [ 186.039629][ T6802] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 186.056736][ T5208] ldm_validate_partition_table(): Disk read failed. [ 186.073848][ T5208] Dev loop6: unable to read RDB block 0 [ 186.080066][ T5208] loop6: unable to read partition table [ 186.992827][ T6813] loop6: detected capacity change from 0 to 524287999 [ 187.011666][ T6830] serio: Serial port ttynull [ 187.462654][ T6841] usb usb6: usbfs: interface 0 claimed by hub while 'syz.0.243' sets config #4 [ 189.580283][ T6909] input: syz1 as /devices/virtual/input/input10 [ 191.139563][ T6973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.177040][ T6975] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 191.664419][ T6990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.538893][ T7012] [U]  [ 193.137065][ T7029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.323189][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.329762][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.588555][ T7095] binder: 7093:7095 ioctl c018620b 9999999999999999 returned -14 [ 195.598376][ T7096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.095275][ T7108] loop8: detected capacity change from 0 to 7 [ 196.131853][ T7108] Dev loop8: unable to read RDB block 7 [ 196.166682][ T7108] loop8: unable to read partition table [ 196.262191][ T7108] loop8: partition table beyond EOD, truncated [ 196.320378][ T7108] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 197.158347][ T7147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.516484][ T7154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 198.461990][ T7186] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 198.799520][ T7196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 198.820879][ T7196] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 199.899875][ T7228] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 200.119996][ T7242] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 200.743152][ T7273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 200.755210][ T7273] input: syz1 as /devices/virtual/input/input11 [ 201.457068][ T7317] random: crng reseeded on system resumption [ 202.026853][ T7350] sp0: Synchronizing with TNC [ 202.459076][ T7371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.095199][ T7404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.600511][ T7483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.351575][ T7580] sp0: Synchronizing with TNC [ 206.431499][ T7580] [U] è [ 207.632960][ T7724] random: crng reseeded on system resumption [ 208.640517][ T7791] can0: slcan on ptm0. [ 208.764912][ T7783] can0 (unregistered): slcan off ptm0. [ 209.389981][ T7832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.495611][ T7918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.306485][ T7945] input: syz1 as /devices/virtual/input/input13 [ 212.809220][ T7971] program syz.2.446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.626302][ T8004] random: crng reseeded on system resumption [ 214.746678][ T8040] input: syz0 as /devices/virtual/input/input14 [ 214.854079][ T8048] usb usb1: usbfs: process 8048 (syz.0.460) did not claim interface 0 before use [ 215.536052][ T8083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.827657][ T8102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.879030][ T8141] mkiss: ax0: crc mode is auto. [ 217.104254][ T8158] syz.2.480: attempt to access beyond end of device [ 217.104254][ T8158] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 217.119993][ T8158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.180138][ T8302] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.196109][ T8302] input: syz0 as /devices/virtual/input/input17 [ 220.217175][ T8302] input: failed to attach handler leds to device input17, error: -6 [ 220.970239][ T8345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.474016][ T8364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.444495][ T8418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.285874][ T8470] syz.3.535: attempt to access beyond end of device [ 225.285874][ T8470] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 226.583306][ T8499] ubi31: attaching mtd0 [ 226.597435][ T8499] ubi31: scanning is finished [ 226.620478][ T8499] ubi31: empty MTD device detected [ 226.961662][ T8499] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 227.105032][ T8499] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 227.182168][ T8499] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 227.191598][ T8499] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 227.240486][ T8499] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 227.254865][ T8499] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 227.266283][ T8499] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 473440597 [ 227.277967][ T8499] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 227.325622][ T8539] ubi31: background thread "ubi_bgt31d" started, PID 8539 [ 227.955992][ T8639] random: crng reseeded on system resumption [ 228.137588][ T8648] input: syz1 as /devices/virtual/input/input19 [ 228.180401][ T8648] [U]  [ 229.794619][ T8742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.217967][ T8758] loop8: detected capacity change from 0 to 7 [ 230.238076][ T7594] Dev loop8: unable to read RDB block 7 [ 230.246990][ T7594] loop8: unable to read partition table [ 230.265126][ T7594] loop8: partition table beyond EOD, truncated [ 230.281985][ T8764] input: syz1 as /devices/virtual/input/input21 [ 230.327158][ T8758] Dev loop8: unable to read RDB block 7 [ 230.363006][ T8758] loop8: unable to read partition table [ 230.368902][ T8758] loop8: partition table beyond EOD, truncated [ 230.446258][ T8758] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 231.426784][ T8789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.548253][ T8791] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 232.023343][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 233.740020][ T8844] input: syz1 as /devices/virtual/input/input22 [ 234.062905][ T5861] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 234.371035][ T8854] syz.2.585: attempt to access beyond end of device [ 234.371035][ T8854] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 234.698061][ T8865] vimc link validate: Sensor B:src:258x16 (0x33424752, 8, 0, 2, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 235.181319][ T8878] loop2: detected capacity change from 0 to 7 [ 235.218356][ T7594] Dev loop2: unable to read RDB block 7 [ 235.228512][ T7594] loop2: unable to read partition table [ 235.252246][ T7594] loop2: partition table beyond EOD, truncated [ 235.321159][ T8878] Dev loop2: unable to read RDB block 7 [ 235.348634][ T8878] loop2: unable to read partition table [ 235.375308][ T8878] loop2: partition table beyond EOD, truncated [ 235.400690][ T8878] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 235.559241][ T5208] Dev loop2: unable to read RDB block 7 [ 235.592482][ T5208] loop2: unable to read partition table [ 235.611438][ T5208] loop2: partition table beyond EOD, truncated [ 235.617805][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.627735][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.636560][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.645304][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.653276][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.665830][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.673346][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.681974][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.751718][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.761934][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.097844][ T8916] input: syz1 as /devices/virtual/input/input23 [ 236.215181][ T5858] syz-executor (5858) used greatest stack depth: 20024 bytes left [ 236.371385][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.603516][ T8947] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.680347][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.923421][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.058972][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.132911][ T8886] chnl_net:caif_netlink_parms(): no params data found [ 237.586733][ T8886] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.598149][ T8886] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.606985][ T8886] bridge_slave_0: entered allmulticast mode [ 237.615976][ T8886] bridge_slave_0: entered promiscuous mode [ 237.689925][ T8886] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.723757][ T8886] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.761796][ T8886] bridge_slave_1: entered allmulticast mode [ 237.784268][ T8886] bridge_slave_1: entered promiscuous mode [ 237.832492][ T5861] Bluetooth: hci4: command tx timeout [ 237.945074][ T63] bridge_slave_1: left allmulticast mode [ 237.970430][ T63] bridge_slave_1: left promiscuous mode [ 238.008900][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.090776][ T63] bridge_slave_0: left allmulticast mode [ 238.112773][ T63] bridge_slave_0: left promiscuous mode [ 238.137100][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.048736][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.061386][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.074759][ T63] bond0 (unregistering): Released all slaves [ 239.202371][ T8886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.313867][ T8886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.516399][ T8886] team0: Port device team_slave_0 added [ 239.563316][ T8886] team0: Port device team_slave_1 added [ 239.819944][ T63] hsr_slave_0: left promiscuous mode [ 239.829365][ T63] hsr_slave_1: left promiscuous mode [ 239.839125][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.912469][ T5861] Bluetooth: hci4: command tx timeout [ 239.937077][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.948032][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.955589][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.981740][ T63] veth1_macvtap: left promiscuous mode [ 239.988093][ T63] veth0_macvtap: left promiscuous mode [ 239.993877][ T63] veth1_vlan: left promiscuous mode [ 239.999409][ T63] veth0_vlan: left promiscuous mode [ 240.643814][ T63] team0 (unregistering): Port device team_slave_1 removed [ 240.691431][ T63] team0 (unregistering): Port device team_slave_0 removed [ 240.790473][ T9303] loop6: detected capacity change from 0 to 524287999 [ 241.295707][ T8886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.306455][ T8886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.332831][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.350319][ T8886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.405489][ T8886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.413303][ T8886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.472565][ T8886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.751852][ T8886] hsr_slave_0: entered promiscuous mode [ 241.798447][ T8886] hsr_slave_1: entered promiscuous mode [ 241.982640][ T5861] Bluetooth: hci4: command tx timeout [ 242.523780][ T8886] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 242.566482][ T8886] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 242.593104][ T8886] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 242.610301][ T8886] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 242.938457][ T8886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.007855][ T8886] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.049097][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.056314][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.110422][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.118343][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.834784][ T8886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.069159][ T5861] Bluetooth: hci4: command tx timeout [ 244.465260][ T8886] veth0_vlan: entered promiscuous mode [ 244.490474][ T8886] veth1_vlan: entered promiscuous mode [ 244.594787][ T8886] veth0_macvtap: entered promiscuous mode [ 244.613963][ T8886] veth1_macvtap: entered promiscuous mode [ 244.645543][ T8886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.687134][ T8886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.759759][ T8886] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.787465][ T8886] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.816763][ T8886] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.839584][ T9570] CUSE: info not properly terminated [ 244.840445][ T8886] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.194521][ T9579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.271624][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.301546][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.378650][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.396507][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.631515][ T9601] deleting an unspecified loop device is not supported. [ 246.954029][ T9663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.190213][ T9673] block nbd0: NBD_DISCONNECT [ 250.046572][ T9788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.268928][ T9797] kvm: user requested TSC rate below hardware speed [ 250.458387][ T9814] binder: 9811:9814 ioctl c0306201 2000000001c0 returned -22 [ 252.285712][ T9880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.016359][ T9929] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.678' sets config #5 [ 253.707371][ T9956] QAT: failed to copy from user. [ 254.276361][ T9984] input: syz1 as /devices/virtual/input/input29 [ 255.746177][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.752603][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.635298][T10124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.087084][T10156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.282047][T10198] kvm: user requested TSC rate below hardware speed [ 266.329863][T10204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.430082][T10216] syz.4.705: attempt to access beyond end of device [ 266.430082][T10216] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 267.762638][T10281] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.714' sets config #1 [ 267.787499][T10284] QAT: Stopping all acceleration devices. [ 267.828297][T10284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.059720][T10300] input: syz1 as /devices/virtual/input/input31 [ 268.684370][T10315] input: syz1 as /devices/virtual/input/input32 [ 268.786314][T10321] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.809135][T10321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.266350][T10402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.493917][T10420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.545802][T10435] misc userio: Can't change port type on an already running userio instance [ 270.681883][T10447] syz.0.740: attempt to access beyond end of device [ 270.681883][T10447] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 270.777371][T10451] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 272.264359][T10530] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 272.708783][T10568] usb usb1: usbfs: process 10568 (syz.3.760) did not claim interface 0 before use [ 272.826270][T10575] syz.2.761: attempt to access beyond end of device [ 272.826270][T10575] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 273.151591][T10586] input input33: cannot allocate more than FF_MAX_EFFECTS effects [ 273.330540][T10627] binder: 10621:10627 ioctl c0306201 0 returned -14 [ 274.201796][T10742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.951075][T10799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.246577][ T79] Bluetooth: (null): Invalid header checksum [ 276.281831][ T79] Bluetooth: (null): Invalid header checksum [ 276.363943][ T48] Bluetooth: (null): Invalid header checksum [ 276.470893][ T48] Bluetooth: (null): Invalid header checksum [ 276.574554][ T79] Bluetooth: (null): Invalid header checksum [ 276.688961][ T79] Bluetooth: (null): Invalid header checksum [ 276.806079][ T79] Bluetooth: (null): Invalid header checksum [ 276.833722][T10876] misc userio: Begin command sent, but we're already running [ 276.914880][ T79] Bluetooth: (null): Invalid header checksum [ 278.094940][T10924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.129626][T10922] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 278.963411][T10959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.643205][T11009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.717622][T11021] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 279.834804][T11029] No buffer was provided with the request [ 280.023315][T11035] binder: 11034:11035 ioctl c0306201 200000000540 returned -14 [ 280.185841][T11040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.839866][T11072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.101434][T11080] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 281.468724][T11111] misc userio: No port type given on /dev/userio [ 282.224447][T11143] sp0: Synchronizing with TNC [ 282.261901][T11143] loop5: detected capacity change from 0 to 7 [ 282.271342][T11143] Dev loop5: unable to read RDB block 7 [ 282.283592][T11143] loop5: unable to read partition table [ 282.299644][T11143] loop5: partition table beyond EOD, truncated [ 282.307520][T11143] loop_reread_partitions: partition scan of loop5 (þ被x) failed (rc=-5) [ 282.499761][ T5208] Dev loop5: unable to read RDB block 7 [ 282.506806][ T5208] loop5: unable to read partition table [ 282.512701][ T5208] loop5: partition table beyond EOD, truncated [ 283.509720][T11213] qrtr: Invalid version 43 [ 283.523071][T11213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.634916][T11224] CUSE: DEVNAME unspecified [ 284.332235][T11253] binder: 11252:11253 ioctl c0306201 2000000003c0 returned -14 [ 284.455708][T11263] syz.4.854: attempt to access beyond end of device [ 284.455708][T11263] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 284.710061][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.727449][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 284.737249][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.747172][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 284.776122][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.794638][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 284.805051][T11281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.823749][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.849320][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 284.864081][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.897375][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 284.915048][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.074034][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.089982][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.119765][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.130774][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.151273][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.170178][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.194049][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.212658][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.222152][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.244109][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.255357][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.278915][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.296416][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.307108][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.336318][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.362586][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.393222][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.401706][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.453413][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.461926][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.511079][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.589425][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.625492][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.699712][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.709268][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.717886][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.737347][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.802574][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.811994][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.820677][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.832547][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.849703][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.859684][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.883239][T11271] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.904956][T11271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 286.037283][T11319] input: syz0 as /devices/virtual/input/input36 [ 286.304281][T11335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.333947][T11432] misc userio: Invalid payload size [ 288.603097][T11445] dlm: non-version read from control device 71 [ 288.667533][T11447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.705396][T11451] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 288.727895][T11447] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 289.167922][T11495] Invalid logical block size (16) [ 289.956915][T11516] program syz.4.896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.861377][T11549] input: syz0 as /devices/virtual/input/input41 [ 291.044857][T11558] binder: 11548:11558 ioctl c0306201 200000000100 returned -22 [ 292.053746][T11612] ALSA: seq fatal error: cannot create timer (-19) [ 292.330444][T11628] random: crng reseeded on system resumption [ 293.533085][T11684] input: syz0 as /devices/virtual/input/input43 [ 293.777981][T11701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.912055][T11712] kernel profiling enabled (shift: 6) [ 294.151447][T11721] ALSA: seq fatal error: cannot create timer (-22) [ 298.718474][T11885] CUSE: info not properly terminated [ 298.847693][T11888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.561076][T11931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.028555][T11964] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 301.266183][T11984] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 301.272339][T11984] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 301.287120][T11984] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 301.557192][T12009] kvm: user requested TSC rate below hardware speed [ 301.888869][T12022] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.703065][ T5861] Bluetooth: hci4: command 0x0c1a tx timeout [ 302.759922][T12065] can0: slcan on ttyS3. [ 302.801715][T12065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.063661][T12064] can0 (unregistered): slcan off ttyS3. [ 304.782983][ T5861] Bluetooth: hci4: command 0x0c1a tx timeout [ 305.526878][T12187] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 305.707746][T12196] i2c i2c-0: Invalid block write size 34 [ 306.693583][T12237] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 306.862577][ T5861] Bluetooth: hci4: command 0x0c1a tx timeout [ 308.533502][T12266] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 308.533553][T12266] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 309.685037][T12347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.101700][T12504] QAT: Invalid ioctl 1074828330 [ 315.051692][T12519] input: syz1 as /devices/virtual/input/input45 [ 315.233228][T12536] input: syz0 as /devices/virtual/input/input46 [ 317.186224][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.193495][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.331330][T12578] sp0: Synchronizing with TNC [ 378.628873][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.635275][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.067023][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.074038][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.783273][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 470.790868][ T31] Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 [ 470.798653][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.807369][ T31] task:kworker/1:0 state:D stack:23432 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 470.819402][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 470.826145][ T31] Call Trace: [ 470.829447][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 470.832431][ T31] __schedule+0x16f5/0x4d00 [ 470.842387][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 470.847643][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 470.857566][ T31] ? schedule+0x165/0x360 [ 470.861946][ T31] ? __pfx___schedule+0x10/0x10 [ 470.874225][ T31] ? schedule+0x91/0x360 [ 470.882525][ T31] schedule+0x165/0x360 [ 470.886923][ T31] schedule_preempt_disabled+0x13/0x30 [ 470.915842][ T31] __mutex_lock+0x724/0xe80 [ 470.920423][ T31] ? look_up_lock_class+0x74/0x170 [ 470.935951][ T31] ? __mutex_lock+0x51b/0xe80 [ 470.940712][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 470.947514][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 470.956481][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 470.962253][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 470.968414][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 470.974837][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 470.980806][ T31] process_scheduled_works+0xae1/0x17b0 [ 470.987044][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 470.993464][ T31] worker_thread+0x8a0/0xda0 [ 470.998132][ T31] kthread+0x70e/0x8a0 [ 471.002238][ T31] ? __pfx_worker_thread+0x10/0x10 [ 471.007888][ T31] ? __pfx_kthread+0x10/0x10 [ 471.012775][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.017992][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.023693][ T31] ? __pfx_kthread+0x10/0x10 [ 471.028300][ T31] ret_from_fork+0x3f9/0x770 [ 471.034423][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 471.039560][ T31] ? __switch_to_asm+0x39/0x70 [ 471.044386][ T31] ? __switch_to_asm+0x33/0x70 [ 471.049165][ T31] ? __pfx_kthread+0x10/0x10 [ 471.053820][ T31] ret_from_fork_asm+0x1a/0x30 [ 471.058618][ T31] [ 471.061735][ T31] INFO: task kworker/1:3:5907 blocked for more than 143 seconds. [ 471.069559][ T31] Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 [ 471.077318][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.086038][ T31] task:kworker/1:3 state:D stack:22712 pid:5907 tgid:5907 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 471.098072][ T31] Workqueue: events rfkill_sync_work [ 471.103445][ T31] Call Trace: [ 471.106742][ T31] [ 471.109698][ T31] __schedule+0x16f5/0x4d00 [ 471.114276][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 471.119491][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 471.125880][ T31] ? schedule+0x165/0x360 [ 471.130217][ T31] ? __pfx___schedule+0x10/0x10 [ 471.135139][ T31] ? schedule+0x91/0x360 [ 471.139394][ T31] schedule+0x165/0x360 [ 471.143604][ T31] schedule_preempt_disabled+0x13/0x30 [ 471.149161][ T31] __mutex_lock+0x724/0xe80 [ 471.153720][ T31] ? __mutex_lock+0x51b/0xe80 [ 471.158402][ T31] ? rfkill_sync_work+0x2e/0x200 [ 471.163400][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 471.168447][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 471.174228][ T31] rfkill_sync_work+0x2e/0x200 [ 471.179003][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 471.184788][ T31] process_scheduled_works+0xae1/0x17b0 [ 471.190364][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 471.196416][ T31] worker_thread+0x8a0/0xda0 [ 471.201021][ T31] ? __kthread_parkme+0x7b/0x200 [ 471.206152][ T31] kthread+0x70e/0x8a0 [ 471.210233][ T31] ? __pfx_worker_thread+0x10/0x10 [ 471.215398][ T31] ? __pfx_kthread+0x10/0x10 [ 471.220009][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.225684][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.230901][ T31] ? __pfx_kthread+0x10/0x10 [ 471.235527][ T31] ret_from_fork+0x3f9/0x770 [ 471.240292][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 471.245473][ T31] ? __switch_to_asm+0x39/0x70 [ 471.250239][ T31] ? __switch_to_asm+0x33/0x70 [ 471.255051][ T31] ? __pfx_kthread+0x10/0x10 [ 471.259660][ T31] ret_from_fork_asm+0x1a/0x30 [ 471.265245][ T31] [ 471.268496][ T31] INFO: task syz.4.1035:12257 blocked for more than 143 seconds. [ 471.276289][ T31] Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 [ 471.284023][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.292729][ T31] task:syz.4.1035 state:D stack:25384 pid:12257 tgid:12256 ppid:8886 task_flags:0x400040 flags:0x00004006 [ 471.304737][ T31] Call Trace: [ 471.308018][ T31] [ 471.310941][ T31] __schedule+0x16f5/0x4d00 [ 471.315544][ T31] ? schedule+0x165/0x360 [ 471.319885][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.324950][ T31] ? __pfx___schedule+0x10/0x10 [ 471.330002][ T31] ? schedule+0x91/0x360 [ 471.334316][ T31] schedule+0x165/0x360 [ 471.338489][ T31] schedule_timeout+0x9a/0x270 [ 471.343361][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 471.348763][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.354020][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.359228][ T31] ? wait_for_completion+0x267/0x5d0 [ 471.364616][ T31] wait_for_completion+0x2bf/0x5d0 [ 471.369747][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 471.375427][ T31] ? __flush_work+0xd2/0xbc0 [ 471.380021][ T31] ? __flush_work+0xd2/0xbc0 [ 471.384707][ T31] __flush_work+0x9b9/0xbc0 [ 471.389219][ T31] ? __flush_work+0xd2/0xbc0 [ 471.393850][ T31] ? __pfx___flush_work+0x10/0x10 [ 471.398888][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 471.404288][ T31] ? __pfx___cancel_work+0x10/0x10 [ 471.409410][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 471.415626][ T31] __cancel_work_sync+0xbe/0x110 [ 471.420662][ T31] rfkill_unregister+0x92/0x220 [ 471.425593][ T31] nfc_unregister_device+0x96/0x2a0 [ 471.430809][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 471.436584][ T31] virtual_ncidev_close+0x56/0x90 [ 471.441618][ T31] __fput+0x44c/0xa70 [ 471.445752][ T31] task_work_run+0x1d1/0x260 [ 471.450444][ T31] ? __pfx_task_work_run+0x10/0x10 [ 471.455702][ T31] get_signal+0x11ed/0x1340 [ 471.460235][ T31] ? task_work_add+0x377/0x420 [ 471.465551][ T31] ? __pfx_vfs_read+0x10/0x10 [ 471.470259][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 471.475854][ T31] ? __pfx___fput_deferred+0x10/0x10 [ 471.481145][ T31] ? __fget_files+0x2a/0x420 [ 471.485850][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 471.492035][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 471.498098][ T31] exit_to_user_mode_loop+0x75/0x110 [ 471.503557][ T31] do_syscall_64+0x2bd/0x3b0 [ 471.508791][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.514072][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.520150][ T31] ? clear_bhb_loop+0x60/0xb0 [ 471.524935][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.530962][ T31] RIP: 0033:0x7f367a38e929 [ 471.535509][ T31] RSP: 002b:00007f367b244038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 471.544124][ T31] RAX: fffffffffffffff2 RBX: 00007f367a5b5fa0 RCX: 00007f367a38e929 [ 471.552275][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 471.560407][ T31] RBP: 00007f367a410b39 R08: 0000000000000000 R09: 0000000000000000 [ 471.568482][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.576503][ T31] R13: 0000000000000000 R14: 00007f367a5b5fa0 R15: 00007ffff1b3a428 [ 471.584664][ T31] [ 471.587828][ T31] INFO: task syz.2.1036:12266 blocked for more than 144 seconds. [ 471.596521][ T31] Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 [ 471.604209][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.613148][ T31] task:syz.2.1036 state:D stack:24312 pid:12266 tgid:12260 ppid:5863 task_flags:0x400040 flags:0x00004006 [ 471.625436][ T31] Call Trace: [ 471.628984][ T31] [ 471.631903][ T31] __schedule+0x16f5/0x4d00 [ 471.636499][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.641540][ T31] ? schedule+0x165/0x360 [ 471.646103][ T31] ? __pfx___schedule+0x10/0x10 [ 471.650976][ T31] ? schedule+0x91/0x360 [ 471.655316][ T31] schedule+0x165/0x360 [ 471.659498][ T31] schedule_preempt_disabled+0x13/0x30 [ 471.665109][ T31] __mutex_lock+0x724/0xe80 [ 471.669629][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.674532][ T31] ? __mutex_lock+0x51b/0xe80 [ 471.679217][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 471.684658][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 471.689699][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.694965][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 471.700957][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 471.707382][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 471.713253][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 471.718393][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 471.724182][ T31] rfkill_set_block+0x1cf/0x440 [ 471.729159][ T31] rfkill_fop_write+0x44b/0x570 [ 471.734183][ T31] ? common_file_perm+0x199/0x200 [ 471.739322][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 471.744761][ T31] ? security_kernfs_init_security+0x250/0x290 [ 471.751486][ T31] ? rw_verify_area+0x258/0x650 [ 471.756453][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 471.761835][ T31] vfs_write+0x27b/0xa90 [ 471.766161][ T31] ? __pfx_vfs_write+0x10/0x10 [ 471.770933][ T31] ? __fget_files+0x2a/0x420 [ 471.775560][ T31] ? __fget_files+0x2a/0x420 [ 471.780157][ T31] ? __fget_files+0x3a0/0x420 [ 471.784911][ T31] ? __fget_files+0x2a/0x420 [ 471.789542][ T31] ksys_write+0x145/0x250 [ 471.794005][ T31] ? __pfx_ksys_write+0x10/0x10 [ 471.798880][ T31] ? rcu_is_watching+0x15/0xb0 [ 471.803911][ T31] ? do_syscall_64+0xbe/0x3b0 [ 471.808712][ T31] do_syscall_64+0xfa/0x3b0 [ 471.813327][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.818541][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.824993][ T31] ? clear_bhb_loop+0x60/0xb0 [ 471.829682][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.835868][ T31] RIP: 0033:0x7fde5918e929 [ 471.840302][ T31] RSP: 002b:00007fde59f55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 471.849187][ T31] RAX: ffffffffffffffda RBX: 00007fde593b6080 RCX: 00007fde5918e929 [ 471.857386][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009 [ 471.865402][ T31] RBP: 00007fde59210b39 R08: 0000000000000000 R09: 0000000000000000 [ 471.873528][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.881590][ T31] R13: 0000000000000000 R14: 00007fde593b6080 R15: 00007fff719c9638 [ 471.889661][ T31] [ 471.892719][ T31] INFO: task syz.0.1078:12570 blocked for more than 144 seconds. [ 471.900456][ T31] Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 [ 471.908411][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.917267][ T31] task:syz.0.1078 state:D stack:27240 pid:12570 tgid:12568 ppid:5865 task_flags:0x400040 flags:0x00004004 [ 471.929347][ T31] Call Trace: [ 471.932675][ T31] [ 471.935612][ T31] __schedule+0x16f5/0x4d00 [ 471.940202][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.945237][ T31] ? schedule+0x165/0x360 [ 471.949686][ T31] ? __pfx___schedule+0x10/0x10 [ 471.954785][ T31] ? schedule+0x91/0x360 [ 471.959049][ T31] schedule+0x165/0x360 [ 471.963290][ T31] schedule_preempt_disabled+0x13/0x30 [ 471.968823][ T31] __mutex_lock+0x724/0xe80 [ 471.973414][ T31] ? __mutex_lock+0x51b/0xe80 [ 471.978200][ T31] ? rfkill_fop_open+0x12d/0x820 [ 471.983343][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 471.988446][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 471.994034][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 471.999627][ T31] rfkill_fop_open+0x12d/0x820 [ 472.004471][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 472.009786][ T31] misc_open+0x2bc/0x330 [ 472.014094][ T31] chrdev_open+0x4cc/0x5e0 [ 472.018524][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 472.023550][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 472.028499][ T31] do_dentry_open+0xdf3/0x1970 [ 472.033355][ T31] vfs_open+0x3b/0x340 [ 472.037436][ T31] ? path_openat+0x2ecd/0x3830 [ 472.042186][ T31] path_openat+0x2ee5/0x3830 [ 472.046969][ T31] ? arch_stack_walk+0xfc/0x150 [ 472.052034][ T31] ? __pfx_path_openat+0x10/0x10 [ 472.057054][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.063430][ T31] do_filp_open+0x1fa/0x410 [ 472.067947][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.073063][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 472.078205][ T31] ? _raw_spin_unlock+0x28/0x50 [ 472.083144][ T31] ? alloc_fd+0x64c/0x6c0 [ 472.087492][ T31] do_sys_openat2+0x121/0x1c0 [ 472.092160][ T31] ? __se_sys_futex+0x36f/0x400 [ 472.097076][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 472.102350][ T31] ? __fget_files+0x2a/0x420 [ 472.106957][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 472.112262][ T31] ? __fget_files+0x2a/0x420 [ 472.117031][ T31] __x64_sys_openat+0x138/0x170 [ 472.121909][ T31] do_syscall_64+0xfa/0x3b0 [ 472.126491][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.131706][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.137839][ T31] ? clear_bhb_loop+0x60/0xb0 [ 472.142606][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.148505][ T31] RIP: 0033:0x7f608838e929 [ 472.152954][ T31] RSP: 002b:00007f6089124038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 472.161386][ T31] RAX: ffffffffffffffda RBX: 00007f60885b6080 RCX: 00007f608838e929 [ 472.169410][ T31] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 472.177423][ T31] RBP: 00007f6088410b39 R08: 0000000000000000 R09: 0000000000000000 [ 472.185445][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.193470][ T31] R13: 0000000000000000 R14: 00007f60885b6080 R15: 00007ffc62605db8 [ 472.201452][ T31] [ 472.204522][ T31] INFO: task syz.0.1078:12571 blocked for more than 144 seconds. [ 472.212238][ T31] Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 [ 472.219938][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.228736][ T31] task:syz.0.1078 state:D stack:25960 pid:12571 tgid:12568 ppid:5865 task_flags:0x400140 flags:0x00004004 [ 472.240911][ T31] Call Trace: [ 472.244259][ T31] [ 472.247206][ T31] __schedule+0x16f5/0x4d00 [ 472.251729][ T31] ? __kasan_slab_free+0x62/0x70 [ 472.256911][ T31] ? security_file_open+0xb1/0x270 [ 472.262069][ T31] ? do_dentry_open+0x35e/0x1970 [ 472.267082][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.272021][ T31] ? schedule+0x165/0x360 [ 472.276420][ T31] ? __pfx___schedule+0x10/0x10 [ 472.281292][ T31] ? schedule+0x91/0x360 [ 472.285598][ T31] schedule+0x165/0x360 [ 472.289764][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.295283][ T31] __mutex_lock+0x724/0xe80 [ 472.299829][ T31] ? __mutex_lock+0x51b/0xe80 [ 472.305258][ T31] ? misc_open+0x51/0x330 [ 472.309672][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.315289][ T31] misc_open+0x51/0x330 [ 472.319511][ T31] chrdev_open+0x4cc/0x5e0 [ 472.324291][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 472.329248][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 472.334228][ T31] do_dentry_open+0xdf3/0x1970 [ 472.339090][ T31] vfs_open+0x3b/0x340 [ 472.343237][ T31] ? path_openat+0x2ecd/0x3830 [ 472.348007][ T31] path_openat+0x2ee5/0x3830 [ 472.352655][ T31] ? arch_stack_walk+0xfc/0x150 [ 472.357529][ T31] ? __pfx_path_openat+0x10/0x10 [ 472.362976][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.369062][ T31] do_filp_open+0x1fa/0x410 [ 472.373661][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.378538][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 472.383686][ T31] ? _raw_spin_unlock+0x28/0x50 [ 472.388547][ T31] ? alloc_fd+0x64c/0x6c0 [ 472.392943][ T31] do_sys_openat2+0x121/0x1c0 [ 472.397629][ T31] ? __se_sys_futex+0x36f/0x400 [ 472.402556][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 472.407765][ T31] ? rcu_is_watching+0x15/0xb0 [ 472.412586][ T31] __x64_sys_openat+0x138/0x170 [ 472.417442][ T31] do_syscall_64+0xfa/0x3b0 [ 472.421926][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.427176][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.433325][ T31] ? clear_bhb_loop+0x60/0xb0 [ 472.438004][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.443957][ T31] RIP: 0033:0x7f608838e929 [ 472.448373][ T31] RSP: 002b:00007f60861f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 472.456838][ T31] RAX: ffffffffffffffda RBX: 00007f60885b6160 RCX: 00007f608838e929 [ 472.465012][ T31] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 472.473048][ T31] RBP: 00007f6088410b39 R08: 0000000000000000 R09: 0000000000000000 [ 472.481023][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.489489][ T31] R13: 0000000000000000 R14: 00007f60885b6160 R15: 00007ffc62605db8 [ 472.497501][ T31] [ 472.500511][ T31] INFO: task syz.3.1080:12577 blocked for more than 145 seconds. [ 472.508390][ T31] Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 [ 472.516051][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.524800][ T31] task:syz.3.1080 state:D stack:28120 pid:12577 tgid:12576 ppid:5867 task_flags:0x400040 flags:0x00004004 [ 472.536829][ T31] Call Trace: [ 472.540116][ T31] [ 472.543297][ T31] __schedule+0x16f5/0x4d00 [ 472.547819][ T31] ? __kasan_slab_free+0x62/0x70 [ 472.552818][ T31] ? security_file_open+0xb1/0x270 [ 472.557939][ T31] ? do_dentry_open+0x35e/0x1970 [ 472.562983][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.567842][ T31] ? schedule+0x165/0x360 [ 472.572167][ T31] ? __pfx___schedule+0x10/0x10 [ 472.577091][ T31] ? schedule+0x91/0x360 [ 472.581431][ T31] schedule+0x165/0x360 [ 472.585657][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.591124][ T31] __mutex_lock+0x724/0xe80 [ 472.595688][ T31] ? __mutex_lock+0x51b/0xe80 [ 472.600370][ T31] ? misc_open+0x51/0x330 [ 472.604763][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.609800][ T31] misc_open+0x51/0x330 [ 472.614093][ T31] chrdev_open+0x4cc/0x5e0 [ 472.618521][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 472.623525][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 472.628472][ T31] do_dentry_open+0xdf3/0x1970 [ 472.633321][ T31] vfs_open+0x3b/0x340 [ 472.637394][ T31] ? path_openat+0x2ecd/0x3830 [ 472.642142][ T31] path_openat+0x2ee5/0x3830 [ 472.646793][ T31] ? arch_stack_walk+0xfc/0x150 [ 472.651680][ T31] ? __pfx_path_openat+0x10/0x10 [ 472.656777][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.662934][ T31] do_filp_open+0x1fa/0x410 [ 472.667459][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.672492][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 472.677543][ T31] ? _raw_spin_unlock+0x28/0x50 [ 472.682466][ T31] ? alloc_fd+0x64c/0x6c0 [ 472.686828][ T31] do_sys_openat2+0x121/0x1c0 [ 472.691490][ T31] ? __se_sys_futex+0x36f/0x400 [ 472.696483][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 472.701715][ T31] ? rcu_is_watching+0x15/0xb0 [ 472.706677][ T31] __x64_sys_openat+0x138/0x170 [ 472.711546][ T31] do_syscall_64+0xfa/0x3b0 [ 472.716262][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.721623][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.727769][ T31] ? clear_bhb_loop+0x60/0xb0 [ 472.732743][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.738643][ T31] RIP: 0033:0x7fd383f8e929 [ 472.743125][ T31] RSP: 002b:00007fd384d4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 472.751544][ T31] RAX: ffffffffffffffda RBX: 00007fd3841b5fa0 RCX: 00007fd383f8e929 [ 472.759545][ T31] RDX: 0000000000008000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 472.767561][ T31] RBP: 00007fd384010b39 R08: 0000000000000000 R09: 0000000000000000 [ 472.775566][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.783647][ T31] R13: 0000000000000000 R14: 00007fd3841b5fa0 R15: 00007ffc0186ec28 [ 472.791720][ T31] [ 472.794886][ T31] INFO: task syz.3.1080:12578 blocked for more than 145 seconds. [ 472.802762][ T31] Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 [ 472.810396][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.819268][ T31] task:syz.3.1080 state:D stack:26504 pid:12578 tgid:12576 ppid:5867 task_flags:0x400140 flags:0x00004004 [ 472.831353][ T31] Call Trace: [ 472.834676][ T31] [ 472.837610][ T31] __schedule+0x16f5/0x4d00 [ 472.842122][ T31] ? __kasan_slab_free+0x62/0x70 [ 472.847113][ T31] ? security_file_open+0xb1/0x270 [ 472.852230][ T31] ? do_dentry_open+0x35e/0x1970 [ 472.857239][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.862122][ T31] ? schedule+0x165/0x360 [ 472.866588][ T31] ? __pfx___schedule+0x10/0x10 [ 472.871474][ T31] ? schedule+0x91/0x360 [ 472.875922][ T31] schedule+0x165/0x360 [ 472.880097][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.885796][ T31] __mutex_lock+0x724/0xe80 [ 472.890320][ T31] ? __mutex_lock+0x51b/0xe80 [ 472.895128][ T31] ? misc_open+0x51/0x330 [ 472.899558][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.904698][ T31] misc_open+0x51/0x330 [ 472.908875][ T31] chrdev_open+0x4cc/0x5e0 [ 472.913450][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 472.918436][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 472.923459][ T31] do_dentry_open+0xdf3/0x1970 [ 472.928263][ T31] vfs_open+0x3b/0x340 [ 472.932407][ T31] ? path_openat+0x2ecd/0x3830 [ 472.937192][ T31] path_openat+0x2ee5/0x3830 [ 472.941814][ T31] ? arch_stack_walk+0xfc/0x150 [ 472.946969][ T31] ? __pfx_path_openat+0x10/0x10 [ 472.951930][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.958261][ T31] do_filp_open+0x1fa/0x410 [ 472.962838][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.967705][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 472.972801][ T31] ? _raw_spin_unlock+0x28/0x50 [ 472.977660][ T31] ? alloc_fd+0x64c/0x6c0 [ 472.981998][ T31] do_sys_openat2+0x121/0x1c0 [ 472.986748][ T31] ? __se_sys_futex+0x36f/0x400 [ 472.991702][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 472.996976][ T31] ? rcu_is_watching+0x15/0xb0 [ 473.001845][ T31] __x64_sys_openat+0x138/0x170 [ 473.006790][ T31] do_syscall_64+0xfa/0x3b0 [ 473.011301][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.016561][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.022697][ T31] ? clear_bhb_loop+0x60/0xb0 [ 473.027380][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.033350][ T31] RIP: 0033:0x7fd383f8e929 [ 473.037773][ T31] RSP: 002b:00007fd384d2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 473.046286][ T31] RAX: ffffffffffffffda RBX: 00007fd3841b6080 RCX: 00007fd383f8e929 [ 473.054449][ T31] RDX: 0000000000000802 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 473.062587][ T31] RBP: 00007fd384010b39 R08: 0000000000000000 R09: 0000000000000000 [ 473.070584][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.078676][ T31] R13: 0000000000000000 R14: 00007fd3841b6080 R15: 00007ffc0186ec28 [ 473.087094][ T31] [ 473.090109][ T31] INFO: task syz-executor:12587 blocked for more than 145 seconds. [ 473.098351][ T31] Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 [ 473.106166][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.114904][ T31] task:syz-executor state:D stack:27768 pid:12587 tgid:12587 ppid:1 task_flags:0x400040 flags:0x00004000 [ 473.126894][ T31] Call Trace: [ 473.130162][ T31] [ 473.133439][ T31] __schedule+0x16f5/0x4d00 [ 473.137966][ T31] ? __kasan_slab_free+0x62/0x70 [ 473.142967][ T31] ? security_file_open+0xb1/0x270 [ 473.148103][ T31] ? do_dentry_open+0x35e/0x1970 [ 473.153213][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.158094][ T31] ? schedule+0x165/0x360 [ 473.162495][ T31] ? __pfx___schedule+0x10/0x10 [ 473.167365][ T31] ? schedule+0x91/0x360 [ 473.171624][ T31] schedule+0x165/0x360 [ 473.175875][ T31] schedule_preempt_disabled+0x13/0x30 [ 473.181347][ T31] __mutex_lock+0x724/0xe80 [ 473.185927][ T31] ? __mutex_lock+0x51b/0xe80 [ 473.190678][ T31] ? misc_open+0x51/0x330 [ 473.195073][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 473.200141][ T31] misc_open+0x51/0x330 [ 473.204398][ T31] chrdev_open+0x4cc/0x5e0 [ 473.208835][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 473.213846][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 473.218795][ T31] do_dentry_open+0xdf3/0x1970 [ 473.223641][ T31] vfs_open+0x3b/0x340 [ 473.227720][ T31] ? path_openat+0x2ecd/0x3830 [ 473.232559][ T31] path_openat+0x2ee5/0x3830 [ 473.237167][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 473.242895][ T31] ? count_memcg_event_mm+0x21/0x260 [ 473.248201][ T31] ? __pfx_path_openat+0x10/0x10 [ 473.253219][ T31] ? __pfx___up_read+0x10/0x10 [ 473.257991][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 473.263368][ T31] do_filp_open+0x1fa/0x410 [ 473.267876][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.272865][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 473.277907][ T31] ? _raw_spin_unlock+0x28/0x50 [ 473.282833][ T31] ? alloc_fd+0x64c/0x6c0 [ 473.287180][ T31] do_sys_openat2+0x121/0x1c0 [ 473.291844][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 473.297088][ T31] ? fd_install+0x97/0x540 [ 473.301514][ T31] ? fd_install+0x30d/0x540 [ 473.306198][ T31] __x64_sys_openat+0x138/0x170 [ 473.311064][ T31] do_syscall_64+0xfa/0x3b0 [ 473.315624][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.320832][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.326971][ T31] ? clear_bhb_loop+0x60/0xb0 [ 473.331671][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.337643][ T31] RIP: 0033:0x7f0b6238d211 [ 473.342066][ T31] RSP: 002b:00007fff91f57e80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 473.350740][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0b6238d211 [ 473.359437][ T31] RDX: 0000000000000002 RSI: 00007f0b62411506 RDI: 00000000ffffff9c [ 473.367522][ T31] RBP: 00007f0b62411506 R08: 0000000000000000 R09: 00007f0b630ed6c0 [ 473.375667][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 473.383795][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 473.391781][ T31] [ 473.394899][ T31] INFO: task syz-executor:12588 blocked for more than 145 seconds. [ 473.402860][ T31] Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 [ 473.410669][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.419374][ T31] task:syz-executor state:D stack:27672 pid:12588 tgid:12588 ppid:1 task_flags:0x400040 flags:0x00004000 [ 473.431439][ T31] Call Trace: [ 473.434762][ T31] [ 473.437695][ T31] __schedule+0x16f5/0x4d00 [ 473.442189][ T31] ? __kasan_slab_free+0x62/0x70 [ 473.447189][ T31] ? security_file_open+0xb1/0x270 [ 473.452372][ T31] ? do_dentry_open+0x35e/0x1970 [ 473.457329][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.462189][ T31] ? schedule+0x165/0x360 [ 473.466769][ T31] ? __pfx___schedule+0x10/0x10 [ 473.471745][ T31] ? schedule+0x91/0x360 [ 473.476036][ T31] schedule+0x165/0x360 [ 473.480288][ T31] schedule_preempt_disabled+0x13/0x30 [ 473.485827][ T31] __mutex_lock+0x724/0xe80 [ 473.490335][ T31] ? __mutex_lock+0x51b/0xe80 [ 473.495060][ T31] ? misc_open+0x51/0x330 [ 473.499400][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 473.504624][ T31] misc_open+0x51/0x330 [ 473.508800][ T31] chrdev_open+0x4cc/0x5e0 [ 473.513482][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 473.518432][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 473.523438][ T31] do_dentry_open+0xdf3/0x1970 [ 473.528217][ T31] vfs_open+0x3b/0x340 [ 473.532409][ T31] ? path_openat+0x2ecd/0x3830 [ 473.537177][ T31] path_openat+0x2ee5/0x3830 [ 473.541752][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 473.547278][ T31] ? count_memcg_event_mm+0x21/0x260 [ 473.552621][ T31] ? __pfx_path_openat+0x10/0x10 [ 473.557572][ T31] ? __pfx___up_read+0x10/0x10 [ 473.562387][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 473.567685][ T31] do_filp_open+0x1fa/0x410 [ 473.572589][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.577445][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 473.582664][ T31] ? _raw_spin_unlock+0x28/0x50 [ 473.587521][ T31] ? alloc_fd+0x64c/0x6c0 [ 473.591844][ T31] do_sys_openat2+0x121/0x1c0 [ 473.596615][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 473.601837][ T31] ? fd_install+0x97/0x540 [ 473.606361][ T31] ? fd_install+0x30d/0x540 [ 473.610883][ T31] __x64_sys_openat+0x138/0x170 [ 473.615802][ T31] do_syscall_64+0xfa/0x3b0 [ 473.620306][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.625554][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.631641][ T31] ? clear_bhb_loop+0x60/0xb0 [ 473.636353][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.642251][ T31] RIP: 0033:0x7f1cc078d211 [ 473.646720][ T31] RSP: 002b:00007ffd1034a170 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 473.655181][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1cc078d211 [ 473.663235][ T31] RDX: 0000000000000002 RSI: 00007f1cc0811506 RDI: 00000000ffffff9c [ 473.671219][ T31] RBP: 00007f1cc0811506 R08: 0000000000000000 R09: 00007f1cc14ed6c0 [ 473.679234][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 473.687358][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 473.695627][ T31] [ 473.698648][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 473.707746][ T31] [ 473.707746][ T31] Showing all locks held in the system: [ 473.715626][ T31] 3 locks held by kworker/1:0/24: [ 473.720719][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 473.731973][ T31] #1: ffffc900001e7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 473.745655][ T31] #2: ffffffff8f9fd3a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 473.757143][ T31] 1 lock held by khungtaskd/31: [ 473.762428][ T31] #0: ffffffff8e33eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 473.772377][ T31] 2 locks held by getty/5600: [ 473.777079][ T31] #0: ffff88803103e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 473.787160][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 473.797474][ T31] 3 locks held by kworker/1:3/5907: [ 473.802736][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 473.813777][ T31] #1: ffffc90004367bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 473.826345][ T31] #2: ffffffff8f9fd3a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 473.836606][ T31] 1 lock held by syz.4.1035/12257: [ 473.841780][ T31] #0: ffff8880241f5100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 473.851680][ T31] 2 locks held by syz.2.1036/12266: [ 473.856899][ T31] #0: ffffffff8f9fd3a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 473.867075][ T31] #1: ffff8880241f5100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 473.876813][ T31] 2 locks held by syz.0.1078/12570: [ 473.882269][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 473.890829][ T31] #1: ffffffff8f9fd3a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 473.901010][ T31] 1 lock held by syz.0.1078/12571: [ 473.906455][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 473.914973][ T31] 1 lock held by syz.3.1080/12577: [ 473.920086][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 473.928680][ T31] 1 lock held by syz.3.1080/12578: [ 473.933923][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 473.942462][ T31] 1 lock held by syz-executor/12587: [ 473.947755][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 473.956256][ T31] 1 lock held by syz-executor/12588: [ 473.961974][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 473.970510][ T31] 1 lock held by syz-executor/12591: [ 473.975834][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 473.984421][ T31] 1 lock held by syz-executor/12592: [ 473.989709][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 473.998227][ T31] 1 lock held by syz-executor/12603: [ 474.003594][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 474.012167][ T31] 1 lock held by syz-executor/12604: [ 474.017701][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 474.026336][ T31] 1 lock held by syz-executor/12607: [ 474.031630][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 474.040276][ T31] 1 lock held by syz-executor/12608: [ 474.045590][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 474.054083][ T31] 1 lock held by syz-executor/12619: [ 474.059372][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 474.067931][ T31] 1 lock held by syz-executor/12620: [ 474.073423][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 474.081865][ T31] 1 lock held by syz-executor/12623: [ 474.087292][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 474.095810][ T31] 1 lock held by syz-executor/12624: [ 474.101080][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 474.110027][ T31] [ 474.112403][ T31] ============================================= [ 474.112403][ T31] [ 474.120822][ T31] NMI backtrace for cpu 1 [ 474.120838][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 474.120850][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.120861][ T31] Call Trace: [ 474.120866][ T31] [ 474.120871][ T31] dump_stack_lvl+0x189/0x250 [ 474.120886][ T31] ? __wake_up_klogd+0xd9/0x110 [ 474.120901][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.120912][ T31] ? __pfx__printk+0x10/0x10 [ 474.120928][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 474.120943][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 474.120954][ T31] ? _printk+0xcf/0x120 [ 474.120965][ T31] ? __pfx__printk+0x10/0x10 [ 474.120976][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 474.120993][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 474.121007][ T31] watchdog+0xfee/0x1030 [ 474.121017][ T31] ? watchdog+0x1de/0x1030 [ 474.121029][ T31] kthread+0x70e/0x8a0 [ 474.121043][ T31] ? __pfx_watchdog+0x10/0x10 [ 474.121051][ T31] ? __pfx_kthread+0x10/0x10 [ 474.121064][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.121078][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.121092][ T31] ? __pfx_kthread+0x10/0x10 [ 474.121104][ T31] ret_from_fork+0x3f9/0x770 [ 474.121116][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 474.121128][ T31] ? __switch_to_asm+0x39/0x70 [ 474.121139][ T31] ? __switch_to_asm+0x33/0x70 [ 474.121150][ T31] ? __pfx_kthread+0x10/0x10 [ 474.121162][ T31] ret_from_fork_asm+0x1a/0x30 [ 474.121181][ T31] [ 474.121184][ T31] Sending NMI from CPU 1 to CPUs 0: [ 474.278162][ C0] NMI backtrace for cpu 0 [ 474.278178][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 474.278196][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.278205][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 474.278229][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 19 1b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 474.278241][ C0] RSP: 0018:ffffffff8e007d80 EFLAGS: 000002c6 [ 474.278255][ C0] RAX: d265d389ea363a00 RBX: ffffffff81979d58 RCX: d265d389ea363a00 [ 474.278266][ C0] RDX: 0000000000000001 RSI: ffffffff8da4bf4b RDI: ffffffff8be41880 [ 474.278276][ C0] RBP: ffffffff8e007ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 474.278286][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fc22ff0 [ 474.278297][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1c12a50 [ 474.278306][ C0] FS: 0000000000000000(0000) GS:ffff888125a1c000(0000) knlGS:0000000000000000 [ 474.278318][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.278328][ C0] CR2: 000055f56b5f3000 CR3: 000000000e138000 CR4: 00000000003526f0 [ 474.278341][ C0] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 474.278351][ C0] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 474.278360][ C0] Call Trace: [ 474.278366][ C0] [ 474.278371][ C0] default_idle+0x13/0x20 [ 474.278386][ C0] default_idle_call+0x74/0xb0 [ 474.278401][ C0] do_idle+0x1e8/0x510 [ 474.278419][ C0] ? __pfx_do_idle+0x10/0x10 [ 474.278433][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.278452][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 474.278470][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 474.278490][ C0] cpu_startup_entry+0x44/0x60 [ 474.278505][ C0] rest_init+0x2de/0x300 [ 474.278520][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 474.278540][ C0] start_kernel+0x47d/0x500 [ 474.278556][ C0] x86_64_start_reservations+0x24/0x30 [ 474.278574][ C0] x86_64_start_kernel+0x143/0x1c0 [ 474.278618][ C0] common_startup_64+0x13e/0x147 [ 474.278642][ C0] [ 474.337180][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 474.337199][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 474.337219][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.337230][ T31] Call Trace: [ 474.337238][ T31] [ 474.337246][ T31] dump_stack_lvl+0x99/0x250 [ 474.337270][ T31] ? __asan_memcpy+0x40/0x70 [ 474.337288][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.337307][ T31] ? __pfx__printk+0x10/0x10 [ 474.337337][ T31] panic+0x2db/0x790 [ 474.337358][ T31] ? __pfx_panic+0x10/0x10 [ 474.337373][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 474.337395][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 474.337418][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 474.337447][ T31] watchdog+0x102d/0x1030 [ 474.337466][ T31] ? watchdog+0x1de/0x1030 [ 474.337489][ T31] kthread+0x70e/0x8a0 [ 474.337513][ T31] ? __pfx_watchdog+0x10/0x10 [ 474.337528][ T31] ? __pfx_kthread+0x10/0x10 [ 474.337550][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.337572][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.337600][ T31] ? __pfx_kthread+0x10/0x10 [ 474.337621][ T31] ret_from_fork+0x3f9/0x770 [ 474.337641][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 474.337663][ T31] ? __switch_to_asm+0x39/0x70 [ 474.337681][ T31] ? __switch_to_asm+0x33/0x70 [ 474.337699][ T31] ? __pfx_kthread+0x10/0x10 [ 474.337721][ T31] ret_from_fork_asm+0x1a/0x30 [ 474.337754][ T31] [ 474.345337][ T31] Kernel Offset: disabled